Resources

Download the Privacy Governance Framework

Click the links below to download the Framework or your required section:

Full version: IPC Privacy Governance Framework
Sections:

Resources by Section
Overview	Resources: Privacy and Personal Information Protection Act 1998 (PPIP Act), Health Records and Information Privacy Act 2002 (HRIP Act) Mandatory Notification of Data Breach (MNDB) Scheme Privacy Impact Assessment Data sharing and privacy policy Privacy Management Plan Data Breach Policy External links: Personal information under the PPIP Act Health information under the HRIP Act
Governance and leadership	Resources: Fact Sheet – The PPIP Act: Agency systems, policies and practices Information Governance Agency Self-assessment Tools Agency Privacy Management Plans Essential Guidance Toolkit on information access and privacy fundamentals The PPIP Act 1998 The PPIP Regulation 2019 Information Protection Principles (IPPs) The HRIP Act 2002 Health Privacy Principles (HPPs) Privacy and health records – Codes of Practice Privacy and health records – Public Interest Directions Privacy and health records – Statutory Guidelines Understanding your privacy obligations
Privacy Program	Privacy Program Components Privacy Management Plan Privacy Impact Assessments Privacy Protocol for Handling Complaints Managing data breaches in accordance with the PPIP Act Resources Identifying Privacy Issues Checklist - Privacy for NSW public sector agencies Privacy Management Plan Privacy Management Plan Checklist Protocol on the preparation and assessment of Privacy Codes of Practice under the PPIP Act and HRIP Act Use of CCTV ID Scanning Mobile Apps: Know the Risks Privacy and persons with reduced decision-making capacity
Complaints and incident management	Resources Privacy Internal Review for Agencies Checklist Managing Unreasonable Complainant Conduct Checklist for public sector staff: responding to a request for access to health information IPC Regulatory Framework Mandatory Notification of Data Breach Scheme Guide to preparing a data breach policy Fact Sheet for agencies: Exemptions from notification to affected individuals Guide to managing data breaches in accordance with the PPIP Act Form: Data Breach Notification to the Privacy Commissioner Guide to Regulatory Action under the MNDB Scheme Guideline - Guidelines on the assessment of data breaches under Part 6A of the PPIP Act Guideline - Guidelines on the exemption for risk of serious harm to health or safety under section 59W Guideline - Guidelines on the exemption for compromised cyber security under section 59X Data Breach Self-assessment Tool for MNDB Data Breach Prevention Checklist Fact sheet – NSW public sector agencies and data breaches involving tax file numbers Fact sheet – Tips for reducing data breaches when sending emails Transition to the Cloud: managing your agency’s privacy risks Essential Eight Guide to managing cyber security incidents
Evaluation, internal and external oversight	External links Annual Reports (Departments) Regulation 2010 Annual Reports (Statutory Bodies) Regulation 2010

Aboriginal and Torres Strait Islander Flags

We acknowledge Aboriginal and Torres Strait Islander peoples as custodians of Australia and pay our respects to Elders, past and present. We also acknowledge the ongoing connection to land, sea and communities throughout Australia, and the contributions to the lives of all Australians.

© IPC

Navigate

Useful links

IPC Social Media

IPC Social Media Terms of Use